CVE-2020-8777

CVE-2020-8777 affects Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0. The issue is a stored XSS via a user profile photo, demonstrated by a SCRIPT element in an SVG document. Public references document XSS in the SVG photo handling and note affected versions; an Exploit-DB e...